Where is research being done on intrusion detection tools?

A typical wireless intrusion detection system consists of a network appliance, which can be a simple computer, connected to a wireless signal processing device, and antennas placed throughout the facility. The system monitors the radio spectrum used by wireless LANs, and immediately alerts a systems administrator whenever a rogue access point is detected. Conventionally it is achieved by comparing the MAC address of the participating wireless devices.